Anota2 Privacy Policy
Last updated: July 24, 2026
This Privacy Policy describes how Anota2 ("the application" or "the App"), developed by Kitusoft, collects, uses, and protects its users' information. It is written to comply with the European Union's General Data Protection Regulation (GDPR), Ecuador's Organic Law on Personal Data Protection (LOPDP), Brazil's Lei Geral de Proteção de Dados (LGPD), the California Consumer Privacy Act (CCPA/CPRA), and the "Data Safety" requirements of Google Play and "App Privacy" of Apple's App Store. By using the application, you accept the practices described in this document.
1. Data controller
The data controller is Kitusoft (Cesar J. Santacruz), based in Quito, Ecuador. For any question about privacy or to exercise your rights, you can contact us at: soporte@kitusoft.com.
2. Data we collect
Anota2 only collects the data needed for it to work:
- Registration data: name and email address, which you provide when creating your account.
- Access credentials: authentication is handled through Firebase Authentication, a Google service. Your password is managed securely by that service; the application does not store it directly nor see it in plain text.
- Profile data: the role assigned within the platform (member or administrator) and the gyms you belong to.
- Usage data: the class reservations you make, including the class, the session, and its date.
- Language preference: the language in which you use the application, so content and notifications are shown in your language.
- Notification identifier: a technical device identifier (token) that allows push notifications to be sent, when this feature is available.
The application does not collect location data, contacts, or payment information.
3. Purpose of processing
The collected data is used exclusively to:
- Enable registration, authentication, and access to the application.
- Manage gym membership and class reservations.
- Apply the platform's role and permission system.
- Send notifications related to your gym's activity, where applicable.
- Display the application in your preferred language.
4. Storage and security
Data is stored on Firebase (Google LLC) infrastructure, which applies security measures in line with recognized standards and participates in the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. All communications between the App and our servers are encrypted via HTTPS/TLS. Access to data is restricted by security rules that ensure each user can only access the information corresponding to their role.
5. Data sharing
Anota2 does not sell or transfer your personal data to third parties. Data is processed through Firebase (Google) services as an infrastructure provider, acting as a data processor.
6. Your rights
As a user, you have the right to access your data, rectify it, object to its processing, and request its deletion. You can delete your account and associated data at any time, as described on our Delete your Anota2 account page. To exercise any of these rights, you can write to us at soporte@kitusoft.com from the email address associated with your account.
7. Data retention
We keep your data while you maintain an active account in the application. When you request the deletion of your account, your personal data is removed from our systems.
8. Minors
The application is aimed at adults or at minors with the consent of their parents or guardians, in accordance with the policies of the gyms that use it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The date of the last update is shown at the top of the document. If the change is material, we will notify you within the App or by email before it takes effect.
10. Contact
For any question about this policy or the processing of your data, contact us at:
Kitusoft Quito, Ecuador Email: soporte@kitusoft.com Website: kitusoft.com